Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-21804: Powershell cmdlets for managing ZPA settings in a zone

Authentication Service ,  

8 October,19 at 09:52 PM

Question: Is it possible to set auto-provisioning on a Centrify zone using powershell? 

Answer: Yes! Part of the Centrify.DirectControl.PowerShell module includes this capability. 
There's a cmdlet Set-CdmZpaSetting with the following switches:
- UserEnabled
- GroupEnabled
- Zone
- UserUid
- UserName
- UserShell
- UserHomeDirectory
- UserPrimaryGroup
- UserGecos
- GroupGid
- GroupName
- UserSource
- GroupSource
- IgnoreDisabledAccount
- EnableUserProvisioning
- EnableGroupProvisioning
- GroupPriority
The -UserEnabled and -GroupEnabled switches are the ones to use to enable auto-provisioning for groups or users. 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleValidating Centrify Zone Delegations articleCentrify profile de-provisioning & orphaned object removal - Part 1 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-7555: Unable to login as root after upgrade to Centrify Suite 2016 (CDC 5.3.0) articleKB-5180: Does PowerShell module support with DirectControl in classic zones? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleCentrify profile de-provisioning & orphaned object removal - Part 2 articleKB-4471: Can access module for PowerShell be used for Centrify's classic zones? articleKB-6041: How to show current license type in use by adclient